Senior Specialist - Architecture

Role description

Job Posting Title

Azure Cloud Architect with strong knowledge of Database Platforms Handson Terraform experience and Strong CICD expertise

Business Justification

As part of CTI strategic priorities and Bigrock5 public deliverables this position is required to design and deliver Azure based Database Platforms as a Service DBaaS for our CIO partners This role will focus on enabling secure compliant and standardized Azure database services delivered endtoend using Infrastructure as Code IaC with Terraform

To meet aggressive delivery timelines we require an Azure Cloud Architect who can design build and maintain Terraform modules that fully conform to Bank enterprise standards including

Azure IAM Entra

Backup and restore policies

Patch management and minor upgrades

MRF standards

Data protection DAR DIT

Cryptography and key management standards

Vaulting and secrets compliance

Baseline and security compliance

This role is also responsible for ensuring the solution satisfies ITAM CSDB and internal audit requirements The candidate will test Terraform modules in Engineering Lab environments identify defects and collaborate with engineering and platform teams to remediate issues

Additionally the role will own CICD automation for Terraform deployments using Bitbucket and Terraform Enterprise TFE

Job Description Position Summary

Azure Cloud Architect with strong handson experience in designing Azure solutions and building Terraformbased IaC modules with proven experience implementing enterprise grade CICD pipelines for cloud infrastructure

Primary Skills

Azure Architecture with strong knowledge of Database Platforms Handson experience with Terraform Strong CICD implementation experience

Terraform Enterprise TFE experience preferred

Ansible playbook experience is a plus

Required Skills

Strong Azure Cloud Architecture experience 7 years designing secure scalable highly available solutions across multisubscription and multiregion environments

Handson Terraform experience 7 years building reusable IaC modules managing remote state work spaces and environment promotion patterns

Terraform Enterprise TFE expertise including workspace design VCSdriven workflows policyascode Sentinel

OPA where applicable and run governance

Strong CICD experience implementing Terraform automation using Azure Dev Ops Git Hub Actions or Bitbucket Pipelines with approvals and quality gates

Deep knowledge of Azure database platforms Azure SQL SQL MI Azure Postgre

SQLMySQL Cosmos DB Redis including HADR backup and performance tuning

Handson Azure IAM Entra  RBAC managed identities service principals least privilege design and enterprise SSOfederation

Azure networking expertise including VNets subnets NSGs UDRs Private Endpoints Private Link DNS and hybrid connectivity ExpressRouteVPN

Strong security and compliance mindset covering Key Vault

CMK encryption DARDIT secrets management loggingmonitoring and baseline compliance

Experience working in regulated enterprise environments Banking preferred with ITAM CSDB audit and policy adherence requirements

Automation experience plus using Ansible for configuration management and postprovisioning tasks

Desired Skills

Azure Cloud Architecture

Terraform Terraform Enterprise

CICD Tools Azure Dev Ops Git Hub Bitbucket Jenkins XLR

Strong understanding of enterprise governance and compliance frameworks